[PATCH 3/4] Fix integer overflow in unpack_sha1_rest()

From

ILIlari Liusvaara <ilari.liusvaara@elisanet.fi>

Date

Jan 26, 2010, 18:24 UTC

Message-ID

<1264530255-4682-4-git-send-email-ilari.liusvaara@elisanet.fi>

In-Reply-To

<1264530255-4682-1-git-send-email-ilari.liusvaara@elisanet.fi>

Signed-off-by: Ilari Liusvaara <ilari.liusvaara@elisanet.fi>
---
 sha1_file.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/sha1_file.c b/sha1_file.c
index 12478a3..39f0844 100644
--- a/sha1_file.c
+++ b/sha1_file.c
@@ -1166,7 +1166,7 @@ static int unpack_sha1_header(z_stream *stream, unsigned char *map, unsigned lon
 static void *unpack_sha1_rest(z_stream *stream, void *buffer, unsigned long size, const unsigned char *sha1)
 {
 	int bytes = strlen(buffer) + 1;
-	unsigned char *buf = xmalloc(1+size);
+	unsigned char *buf = xmallocz(size);
 	unsigned long n;
 	int status = Z_OK;
 

-- 
1.6.6.1.439.gf06b6